OpenSSL support
Author: dmlloydCreated Jan 9, 2019Updated Sep 18, 2026
Labelskind/enhancement
This was a card but now it's an issue too. ;)
We need OpenSSL integration for the native image target. Here are the requirements:
- Replace any/all usages of the JCA with libssl and/or libcrypto direct C calls
- This should be done by implementing each crypto primitive with an implementation class; then we should swap out calls to e.g.
MessageDigest.getInstance("SHA-256")with our own e.g.new OpenSslSHA256MessageDigest(); this is probably best accomplished using a Feature with a node plugin that swaps the invocation sites - Unknown algorithms should be translated to
throw new NoSuchAlgorithmException()
- This should be done by implementing each crypto primitive with an implementation class; then we should swap out calls to e.g.
- Support dynamic run-time linking of OpenSSL implementation
- This is done via
dlsymandCFunctionPointerobjects
- This is done via
Acceptance criteria:
- JSSE/JCA functions correctly :)
- Run time image size is not significantly increased
Source: quarkusio/quarkus